A. With virtualized applications, the actual program runs from the Q: drive by default and not the normal location of C:\Program Files. The default AppLocker exception allows execution of any program under %PROGRAMFILES%, so this won't not apply to Q:. You therefore need to add a new rule to allow execution from the Q: drive.

Start the Group Policy Management Editor and edit a group policy object that will host the AppLocker new exception.